Privacy Policy

Introduction

metroluxis S.A. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website metroluxis.pro and use our restaurant analytics services. As the data controller, we ensure compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller Information

The data controller for your personal information is:

• Company: metroluxis S.A.
• Registration Number: 794613258
• VAT Number: PT791564286
• Address: Rua da Prata 113, 1005-307 Lisbon, Portugal
• Contact: privacy@metroluxis.pro

Data Collection

We collect various types of data we collect from you to provide and improve our restaurant analytics services. The personal data we collect includes information you provide directly to us and information automatically collected when you use our website and services.

Information You Provide

• Contact information (name, email address, phone number)
• Restaurant business information (business name, address, type)
• Account credentials and profile information
• Communication preferences and marketing consents
• Support requests and correspondence
• Payment and billing information

Information Automatically Collected

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Analytics data through cookies and tracking technologies
• Restaurant operational data (when using our analytics platform)

How We Use Your Information

We use the data we collect and how we use your information for various legitimate business purposes, including providing our restaurant analytics services, improving our platform, and communicating with you about our services.

Service Provision

• Providing restaurant analytics and profitability insights
• Processing and analysing your restaurant data
• Maintaining and improving our analytics platform
• Providing customer support and technical assistance

Communication and Marketing

• Sending service-related notifications and updates
• Providing marketing communications (with your consent)
• Responding to your inquiries and support requests
• Conducting customer satisfaction surveys

Legal and Business Operations

• Complying with legal obligations and regulatory requirements
• Protecting our rights and preventing fraud
• Processing payments and managing billing
• Conducting business analytics and performance monitoring

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: To perform our analytics services agreement with you
• Legitimate Interests: For business operations, security, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist in our operations
• Legal Authorities: When required by law or to protect our rights
• Business Partners: With your consent for specific services
• Analytics Providers: For website and service performance analysis

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Our data retention periods vary based on the type of information and purpose for processing:

• Account Data: Retained while your account is active and for 3 years after closure
• Analytics Data: Retained for the duration of our service agreement plus 2 years
• Marketing Data: Retained until you withdraw consent or 2 years of inactivity
• Legal Records: Retained as required by applicable laws and regulations

International Data Transfers

Your data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing in certain cases
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us at privacy@metroluxis.pro or +351 214 456 705.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Contact Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: privacy@metroluxis.pro
• Phone: +351 214 456 705
• Address: metroluxis S.A., Rua da Prata 113, 1005-307 Lisbon, Portugal

Supervisory Authority

You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.